So I currently have all of the profiles necessary for having Cisco AMP installed through DEP, however I have noticed that the user must enable the use of Cisco AMP on their end before it will actually work. If anyone has any ideas on how to avoid having this step ( or needs some additional information before responding with an idea) please let me know and thanks in advanced.